Set /128 suffix in single-address IPv6 CIDR

[MarkOtzen]

The asCidr() helper in networkpolicy.go unconditionally appended a /32 suffix to bare IP addresses. This is correct for IPv4 but invalid for IPv6, where the single-host prefix length is /128.

asCidr() now parses the address to determine its family before appending the suffix (/32 for IPv4, /128 for IPv6). If parsing fails, the original string is passed through to netip.ParsePrefix, which will surface the error as before.

[neo-by-projectdiscovery-dev]

Neo - PR Security Review

No security issues found

Highlights

• Updates asCidr() helper to detect IP address family (IPv4 vs IPv6) before appending CIDR suffix
• Appends /32 for IPv4 addresses and /128 for IPv6 addresses (previously always used /32)
• Adds comprehensive test coverage for IPv4/IPv6 address and CIDR handling

Hardening Notes

• Consider adding validation in New() to log or warn when deny list entries fail both CIDR and regex parsing, as they would be silently ignored in the current implementation

_{Comment @neo help for available commands. · Open in Neo}